Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File: x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier: 097pSzdy6lVH/1XNFlGs2Re7tCEQ1II/HwvzcABTF7U=
Subject key identifier: 2E:C2:8C:EE:0D:B3:2A:98:97:DB:E8:14:E8:FD:ED:03:01:C5:A0:DE
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 0194BD4E5FC194CE57B695F7FBE6FB908766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa (hash: 2jnkEsy8dLS8k5/gnwKVBaZUL+prmqB8W/32sROipKI=)
2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: h2XTVUY8R4LjR98Ja1QGUp4Hu7FzenANygb/xCD4lg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5f:c1:94:ce:57:b6:95:f7:fb:e6:fb:90:87:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=2ec28cee0db32a9897dbe814e8fded0301c5a0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:55:9e:3d:81:5e:3e:70:fc:47:b9:08:a0:bd:
00:2d:92:a7:61:72:21:60:e9:a9:3f:b6:38:16:b6:
c2:62:6f:b7:92:97:66:b1:72:44:4f:79:8a:55:1d:
9e:d8:1a:b9:9a:b8:99:73:23:ed:db:a6:22:da:ce:
cd:f3:2c:bd:96:74:5f:a3:f2:6d:63:6d:e0:31:d7:
97:ed:3c:c6:39:57:4e:67:94:90:59:e3:aa:3b:e4:
00:61:c2:26:d1:8a:7d:02:ae:a5:92:59:a9:21:26:
3d:71:e0:d7:bf:59:a7:16:75:d5:47:f7:45:af:3b:
05:67:ee:b1:57:08:80:4b:e1:43:33:0a:c7:48:2c:
fa:44:46:0d:f3:ce:39:68:0f:94:44:8f:ed:7f:0c:
ac:be:85:a1:12:62:88:ea:0b:97:f0:74:66:fa:70:
5e:7c:c3:f3:58:d4:d9:7e:3a:b8:c3:06:c5:2a:87:
dc:16:c8:58:3c:b7:af:15:c0:ec:08:bc:fa:f0:db:
4e:ad:80:d0:7b:44:37:f2:67:ac:4a:dc:aa:31:60:
2b:b4:49:23:c3:1b:97:f4:06:4b:61:4b:93:81:b9:
da:52:27:dd:7f:69:03:f8:99:aa:1c:1a:0e:1d:f5:
98:a3:25:12:24:2e:ef:0e:a9:7a:b8:69:3d:62:08:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C2:8C:EE:0D:B3:2A:98:97:DB:E8:14:E8:FD:ED:03:01:C5:A0:DE
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c3:ab:40:a8:dc:ed:15:b5:38:d5:47:7b:a9:d2:54:ac:5b:
5a:85:1f:94:96:d2:da:bb:4a:1b:f2:24:22:02:15:28:14:30:
7a:3d:a9:5f:7f:93:bd:54:30:7d:ab:36:fe:d7:a5:a7:74:c8:
fe:ff:12:ec:e1:22:dc:57:d3:bb:61:8c:a7:2b:ce:84:08:fe:
30:32:08:4b:80:0f:85:27:f7:5a:67:1b:57:a5:76:2f:4b:78:
98:d9:42:ae:c5:e4:86:5f:83:1a:98:ad:ee:25:c2:3c:3d:c2:
ca:c7:29:13:b5:e3:14:aa:3f:c6:62:be:66:1a:28:a9:47:8f:
d8:a4:aa:78:f4:2a:5b:59:5d:c7:86:93:ed:bf:53:19:bb:46:
5f:02:65:1a:d3:37:28:d7:28:63:79:31:fb:5f:59:a2:e1:f3:
c4:d6:67:b5:49:4c:34:a7:da:60:a1:fc:f8:f9:97:5d:c5:f5:
e4:ee:e2:34:c2:e1:a1:e5:d3:46:6c:71:b5:55:45:59:1b:e1:
13:ff:3e:fe:13:a6:38:ee:af:cc:1f:45:68:07:2f:62:28:88:
db:03:3e:ed:3f:c1:7d:1e:fc:c8:6a:19:85:71:70:52:bb:3c:
43:a8:5b:39:d6:a5:e7:49:da:9a:d3:be:7d:2b:55:8c:8d:11:
13:9a:5c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:31 2025 by rpki-client